cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
169
Views
0
Helpful
1
Replies

Can a static NAT entry fall within a global range? Post 8.3

hausherrs
Level 1
Level 1

I have a customer that was running 8.2 and we upgraded to 9.x. Now some web servers are not accessible.

Dynamic NAT:

object network obj-5.5.5.150-5.5.5.200
 range 5.5.5.150 5.5.5.200

 

nat (CORE,INTERNET) source dynamic obj-172.20.0.0 obj-5.5.5.150-5.5.5.200

 

Static NAT:

object network h172.20.60.196_CORE-INTERNET
 host 172.20.60.196

object network h172.20.60.196_CORE-INTERNET
 nat (CORE,INTERNET) static 5.5.5.196

 

I plan to clean all this up and have all the dynamic PAT to the outside interface. What I would like to know is can this static nat fall within the pool range and still work? This worked in 8.2. After the upgrade it does not work.

 

Thanks,

 

Steven

 

 

1 Reply 1

hausherrs
Level 1
Level 1

I was able to make the changes the evening that I posted this.

 

As soon as I got rid of the global ranges and used a single IP it started working.

 

I use (any,internet) to a x.x.x.41 and the other statics started working.

Review Cisco Networking for a $25 gift card